Novell.iPrint.Client.Remote.File.Deletion

Description

This indicates an attack attempt against a design weakness in Novell iPrint web client.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted web page. It allows a remote attacker to delete arbitrary files.

Affected Products

Novell iPrint Client before 5.42

Impact

System Compromise: Remote attackers can delete arbitrary files of vulnerable systems.

Recommended Actions

Novell has issued an update to correct this vulnerability:
http://download.novell.com/Download?buildid=ftwZBxEFjIg~

References